CVE-2020-10081

GitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS import process could potentially be used to incorrectly access LFS objects not owned by the user.

packagechannelchannel versionpkg versionstatus
gitlab
nixos-18.03
2019-02-20 10:25:14 UTC (cb0e20)10.7.0vulnerable
2019-01-16 18:00:31 UTC (138f2c)10.7.0vulnerable
2018-12-09 06:05:37 UTC (b551f8)10.7.0vulnerable
2018-11-29 21:00:31 UTC (a18112)10.7.0vulnerable
2018-11-28 06:10:25 UTC (9c96d1)10.7.0vulnerable
2018-11-23 12:45:42 UTC (e64482)10.7.0vulnerable
2018-11-20 12:35:27 UTC (947247)10.7.0vulnerable
2018-11-16 21:00:27 UTC (263f7b)10.7.0vulnerable
2018-11-14 10:35:19 UTC (1d8470)10.7.0vulnerable
2018-11-05 13:10:34 UTC (21b7f5)10.7.0vulnerable
2018-11-02 08:50:28 UTC (0e614d)10.7.0vulnerable
2018-10-30 16:25:07 UTC (19fc6d)10.7.0vulnerable
2018-10-30 14:40:31 UTC (6f07d2)10.7.0vulnerable
2018-10-28 11:35:42 UTC (b4e3a4)10.7.0vulnerable
2018-10-15 12:50:34 UTC (5d19e3)10.7.0vulnerable
2018-10-13 20:20:17 UTC (e85e0c)10.7.0vulnerable
2018-10-13 09:40:17 UTC (d592f2)10.7.0vulnerable
2018-10-11 15:15:08 UTC (5a38f7)10.7.0vulnerable
2018-10-09 11:20:30 UTC (c56ede)10.7.0vulnerable
2018-10-05 13:25:12 UTC (862fb5)10.7.0vulnerable
2018-10-05 13:00:32 UTC (c4eddc)10.7.0vulnerable
2018-09-21 06:10:31 UTC (d16a7a)10.7.0vulnerable
2018-09-19 17:10:27 UTC (8edf56)10.7.0vulnerable
2018-09-18 17:55:38 UTC (305f13)10.7.0vulnerable
2018-09-16 07:30:36 UTC (01f5e7)10.7.0vulnerable
2018-09-13 15:30:12 UTC (5f59ab)10.7.0vulnerable
2018-09-08 09:20:09 UTC (45f52f)10.7.0vulnerable
2018-09-02 21:10:32 UTC (8b92a4)10.7.0vulnerable
2018-09-02 14:20:10 UTC (8c172c)10.7.0vulnerable
2018-09-01 13:55:20 UTC (a960b8)10.7.0vulnerable
2018-08-31 04:20:38 UTC (a37638)10.7.0vulnerable
2018-08-29 17:10:10 UTC (edd63e)10.7.0vulnerable
2018-08-24 19:10:30 UTC (fde201)10.7.0vulnerable
2018-08-23 23:50:20 UTC (f094fd)10.7.0vulnerable
2018-08-19 18:15:22 UTC (4df342)10.7.0vulnerable
2018-08-18 23:45:22 UTC (47b68d)10.7.0vulnerable
2018-08-17 21:25:22 UTC (a4e068)10.7.0vulnerable
2018-08-17 14:30:05 UTC (cd0cd9)10.7.0vulnerable
2018-08-16 13:20:15 UTC (c1ef96)10.7.0vulnerable
2018-08-16 08:30:34 UTC (8b4ed6)10.7.0vulnerable
2018-08-15 15:40:37 UTC (5b8a24)10.7.0vulnerable
2018-08-15 05:50:22 UTC (66bd47)10.7.0vulnerable
2018-08-14 17:35:19 UTC (9cbc73)10.7.0vulnerable
2018-08-13 09:25:26 UTC (10b979)10.7.0vulnerable
2018-08-13 03:20:34 UTC (89ff9f)10.7.0vulnerable
2018-08-12 04:35:15 UTC (bfeab2)10.7.0vulnerable
2018-08-12 00:00:33 UTC (190ec7)10.7.0vulnerable
2018-08-10 22:20:22 UTC (e42c07)10.7.0vulnerable
2018-08-10 17:05:22 UTC (2c3f9c)10.7.0vulnerable
2018-08-09 21:05:22 UTC (3af001)10.7.0vulnerable
2018-08-07 05:10:16 UTC (230f98)10.7.0vulnerable
2018-08-03 03:05:12 UTC (d0c868)10.7.0vulnerable
2018-08-02 12:45:41 UTC (18401b)10.7.0vulnerable
2018-08-02 06:10:24 UTC (0e55dd)10.7.0vulnerable
2018-08-01 00:55:32 UTC (a1299c)10.7.0vulnerable
2018-07-31 16:00:28 UTC (b74b1c)10.7.0vulnerable
2018-07-30 09:15:16 UTC (6115f4)10.7.0vulnerable
2018-07-20 17:40:08 UTC (d6c6c7)10.7.0vulnerable
2018-07-12 04:35:08 UTC (411cc5)10.7.0vulnerable
2018-07-10 08:10:12 UTC (aec217)10.7.0vulnerable
2018-07-10 03:15:29 UTC (5e10df)10.7.0vulnerable
2018-07-09 02:40:20 UTC (e930c6)10.7.0vulnerable
2018-07-08 17:55:36 UTC (de7ca4)10.7.0vulnerable
2018-07-08 10:25:33 UTC (298e17)10.7.0vulnerable
2018-07-04 20:00:25 UTC (56fad1)10.7.0vulnerable
2018-06-30 13:55:14 UTC (2f06e0)10.7.0vulnerable
2018-06-29 17:10:06 UTC (0a70d6)10.7.0vulnerable
2018-06-25 10:30:35 UTC (94d80e)10.7.0vulnerable
2018-06-23 08:30:21 UTC (91b286)10.7.0vulnerable
2018-06-21 23:25:24 UTC (68e02f)10.7.0vulnerable
2018-06-17 01:05:39 UTC (14c248)10.7.0vulnerable
2018-06-16 09:40:33 UTC (f3c913)10.7.0vulnerable
2018-06-14 21:57:20 UTC (08d245)10.7.0vulnerable
nixos-18.09
2018-12-14 15:00:47 UTC (7e8899)11.5.1vulnerable
2018-12-14 09:40:30 UTC (ea863c)11.5.1vulnerable
2018-12-12 04:50:30 UTC (4f3446)11.5.1vulnerable
2018-12-11 18:35:22 UTC (f55c7c)11.5.1vulnerable
2018-12-11 05:30:46 UTC (b144df)11.5.1vulnerable
2018-12-11 00:55:27 UTC (7b7d14)11.5.1vulnerable
2018-12-10 10:15:39 UTC (b352d4)11.5.1vulnerable
2018-12-09 15:40:40 UTC (1a4498)11.5.1vulnerable
2018-12-09 15:15:40 UTC (f006e8)11.5.1vulnerable
2018-12-07 19:05:30 UTC (135a7f)11.5.1vulnerable
2018-12-07 06:35:21 UTC (7795a7)11.5.1vulnerable
2018-12-06 20:25:30 UTC (2dc559)11.5.1vulnerable
2018-12-03 23:00:39 UTC (d45a0d)11.5.0vulnerable
2018-10-11 07:15:22 UTC (4dd9cd)11.3.0vulnerable
2018-10-10 16:15:30 UTC (8cfce9)11.3.0vulnerable
2018-10-10 03:00:34 UTC (59fe4c)11.3.0vulnerable
2018-10-09 20:05:32 UTC (de37b4)11.3.0vulnerable
2018-10-09 08:40:17 UTC (1ada6f)11.3.0vulnerable
2018-10-08 20:00:22 UTC (21293d)11.3.0vulnerable
2018-10-08 13:30:11 UTC (617607)11.3.0vulnerable
2018-10-06 23:30:25 UTC (299814)11.3.0vulnerable
2018-10-06 14:10:32 UTC (6a3f5b)11.3.0vulnerable
2018-10-04 13:05:14 UTC (6cbd1e)11.3.0vulnerable
2018-10-03 08:15:23 UTC (7f70eb)11.3.0vulnerable
2018-10-02 19:55:28 UTC (3e44d2)11.3.0vulnerable
2018-10-02 09:45:23 UTC (66fd61)11.3.0vulnerable
2018-10-02 01:05:40 UTC (10eec0)11.3.0vulnerable
2018-10-01 11:30:25 UTC (b550b7)11.3.0vulnerable
2018-10-01 08:35:23 UTC (0f1911)11.3.0vulnerable
2018-10-01 03:05:17 UTC (26537f)11.3.0vulnerable
2018-09-29 14:15:10 UTC (c922e2)11.3.0vulnerable
2018-09-28 06:20:12 UTC (376891)11.3.0vulnerable
2018-09-27 11:35:18 UTC (3c85e5)11.3.0vulnerable
2018-09-27 08:15:14 UTC (d26e83)11.3.0vulnerable
2018-09-26 15:15:11 UTC (29660a)11.3.0vulnerable
2018-09-26 03:35:36 UTC (391bf8)11.3.0vulnerable
2018-09-25 20:25:23 UTC (358326)11.3.0vulnerable
2018-09-25 15:25:44 UTC (69514d)11.3.0vulnerable
2018-09-24 12:35:11 UTC (e49665)10.8.0vulnerable
2018-09-21 09:35:13 UTC (ef450e)10.8.0vulnerable
2018-09-21 05:20:41 UTC (40d22a)10.8.0vulnerable
2018-09-15 00:45:23 UTC (9fa6a2)10.8.0vulnerable
2018-09-14 18:55:29 UTC (221ec6)10.8.0vulnerable
2018-09-12 22:40:23 UTC (32c008)10.8.0vulnerable
2018-09-12 08:15:39 UTC (8468a4)10.8.0vulnerable
2018-09-06 08:40:22 UTC (6f3bd5)10.8.0vulnerable
2018-09-06 03:15:12 UTC (a01552)10.8.0vulnerable
2018-09-05 18:45:13 UTC (dea9a0)10.8.0vulnerable
2018-09-03 23:20:16 UTC (c0bde6)10.8.0vulnerable
nixos-19.09
2019-11-08 22:50:25 UTC (d9a83d)12.4.1vulnerable
2019-11-08 07:25:13 UTC (d62852)12.4.1vulnerable
2019-11-07 13:45:22 UTC (821c7e)12.4.1vulnerable
nixos-20.03
2020-03-05 13:35:28 UTC (08bcfe)12.8.1vulnerable
nixos-unstable
2020-03-05 14:20:38 UTC (3d6cdf)12.8.1vulnerable
2020-03-04 17:10:47 UTC (9d0fac)12.8.1vulnerable
2020-03-04 14:25:19 UTC (1459b3)12.8.1vulnerable
2019-11-04 02:05:14 UTC (7827d3)12.4.1vulnerable
2019-11-01 05:45:36 UTC (471869)12.4.0vulnerable
2018-12-14 18:35:35 UTC (44b02b)11.5.1vulnerable
2018-12-14 07:45:26 UTC (e0a4d1)11.5.1vulnerable
2018-12-13 17:40:40 UTC (562b7a)11.5.1vulnerable
2018-12-13 10:00:19 UTC (47f008)11.5.1vulnerable
2018-12-13 06:35:46 UTC (c556e6)11.5.1vulnerable
2018-12-12 05:20:26 UTC (ad3e91)11.5.1vulnerable
2018-12-11 15:30:23 UTC (644950)11.5.1vulnerable
2018-12-11 11:30:31 UTC (86344b)11.5.1vulnerable
2018-12-08 11:40:58 UTC (e85c1f)11.5.1vulnerable
2018-12-08 01:10:44 UTC (ca3f08)11.5.1vulnerable
2018-12-07 20:20:37 UTC (57c69f)11.5.1vulnerable
2018-12-07 00:45:17 UTC (c26dbe)11.5.1vulnerable
2018-12-03 19:45:42 UTC (7c73f5)11.5.0vulnerable
2018-10-05 04:00:11 UTC (0a7e25)11.3.0vulnerable
2018-10-04 07:55:22 UTC (f2b3bb)11.3.0vulnerable
2018-10-03 17:00:26 UTC (13b290)11.3.0vulnerable
2018-09-28 02:05:44 UTC (46651b)11.3.0vulnerable
2018-09-27 09:35:18 UTC (a70d3b)11.3.0vulnerable
2018-09-22 02:40:19 UTC (7df10f)10.8.0vulnerable
2018-09-21 13:25:18 UTC (06df7c)10.8.0vulnerable
2018-09-20 00:25:11 UTC (5664e6)10.8.0vulnerable
2018-09-15 16:35:21 UTC (218ce4)10.8.0vulnerable
2018-09-15 00:25:23 UTC (3c5788)10.8.0vulnerable
2018-09-13 09:20:13 UTC (56b9f6)10.8.0vulnerable
2018-09-06 12:05:23 UTC (ca2ba4)10.8.0vulnerable
2018-08-31 20:00:16 UTC (083220)10.8.0vulnerable
2018-08-24 12:50:09 UTC (7db611)10.8.0vulnerable
2018-08-17 11:25:34 UTC (8395f9)10.8.0vulnerable
2018-08-13 14:40:22 UTC (6afd19)10.8.0vulnerable
2018-08-13 09:35:37 UTC (a01850)10.8.0vulnerable
2018-08-12 20:15:12 UTC (4af9ee)10.8.0vulnerable
2018-08-12 02:10:25 UTC (b5b11e)10.8.0vulnerable
2018-08-11 19:25:19 UTC (bd4ef2)10.8.0vulnerable
2018-08-02 04:50:18 UTC (2428f5)10.8.0vulnerable
2018-07-31 15:45:38 UTC (7c5852)10.8.0vulnerable
2018-07-11 16:40:22 UTC (dae9cf)10.8.0vulnerable
2018-07-08 19:55:08 UTC (2a8a55)10.8.0vulnerable
2018-07-08 16:40:22 UTC (784f54)10.8.0vulnerable
2018-07-06 19:55:40 UTC (fda46a)10.8.0vulnerable
2018-07-02 04:50:18 UTC (be1461)10.8.0vulnerable
2018-07-01 00:20:18 UTC (687f5d)10.8.0vulnerable
2018-06-30 12:30:34 UTC (85497a)10.8.0vulnerable
2018-06-29 19:45:17 UTC (e686bd)10.8.0vulnerable
2018-06-22 13:15:24 UTC (a8c710)10.8.0vulnerable
2018-06-14 21:57:20 UTC (4b649a)10.8.0vulnerable